Privacy Policy and Personal Data Information Notices

Privacy policy

This policy covers use of the Puentech website, inquiries made through the website and job applications sent by email. It does not cover every processing activity within customer projects, employment relationships or Help Desk support; those activities require information appropriate to their own scope.

When your browser requests a page, technical details such as your IP address, browser information, requested page and request time reach the web server so it can deliver that page. Processing is limited to what is necessary to provide and secure the website under Article 5(2)(f) of Turkish Law No. 6698, subject to protecting your fundamental rights and freedoms.

The separate notices below explain the information used for inquiries and applications. Reading this page or using the website does not provide blanket explicit consent for optional processing.

Data security and minimization

This web application does not save inquiry messages or CVs in an application database. To limit form abuse, the server stores a keyed IP digest, request identifier, content digest, submission time and status. These records contain no raw IP, contact details or message; digests are not treated as anonymous data. The current and previous day are used; older records are deleted on a new form request or quota startup. Each connection may make five valid submission attempts per Türkiye calendar day, including attempts with email delivery errors. Fonts and website images are served from local files. Information you send by email is processed in the email systems used by the parties to that communication. Do not include unnecessary personal information, passwords or your customers’ personal data in your message.

Retention and deletion principles

Turkish Law No. 6698 requires personal data to be retained for the period specified by applicable legislation or necessary for its processing purpose. Once the conditions for processing cease to exist, the erasure, destruction or anonymization obligation under Article 7 applies. You can use the request channels below to ask about the reason for retaining a particular record about you.

Personal data information notice for inquiries

This notice provides information under Article 10 of Turkish Law No. 6698 for individuals and company representatives making information, proposal, consulting, software or support inquiries. The controller is the Puentech legal entity identified above.

How information is collected

Information comes directly from you through contact form fields and email correspondence, electronically by partly automated means and by non-automated means when correspondence is reviewed. Phone and current ERP details are optional.

Submitting the contact form passes your details from the web server to the mail server configured by Puentech over an encrypted SMTP connection and sends them to the company contact address. Message content, contact details and a delivery identifier are processed by the email infrastructure used for delivery.

This form uses Microsoft 365 (Exchange Online) for email delivery. The information you submit is processed by Microsoft’s email infrastructure to deliver your inquiry.

Retention and deletion principles

Inquiries and related correspondence are stored in the Microsoft 365 mailbox. No fixed automated retention period is configured for this correspondence. This does not itself provide a legal basis for indefinite retention; your rights and request channels under Turkish data protection law are described below.

The form’s “I have read the information notice” field acknowledges that you have seen the information. It is not blanket explicit consent for advertising, analytics or overseas transfers.

Personal data information notice for job applicants

This notice covers information processed when assessing job applications sent through the Careers email link or directly by email. The controller is the Puentech legal entity identified above.

How information is collected

Your name, contact details, education, professional experience, skills and application area are obtained from your email, attached CV and application discussions. Collection is electronic by partly automated means and non-automated when applications are reviewed. The website has no CV upload or automated applicant scoring system.

Retention and deletion principles

Applications and CVs received by email are stored in the Microsoft 365 mailbox. No fixed automated retention period is configured for these records. This notice does not authorize an indefinite CV pool or unspecified future uses. A valid legal ground is required to continue retention after the application process ends.

Do not include unnecessary identity document copies, health information, political opinions, religion, biometric data or criminal conviction information. Do not share referees’ contact details in your initial application; these will be requested separately during assessment if necessary.

Recipient groups and transfer purposes

Inquiries are reviewed by authorized Puentech personnel responsible for assessing and responding to the request. Applications are shared with authorized personnel responsible for applicant assessment.

Email correspondence is processed through email service providers to the extent necessary for delivery and operation of the email service. Where server-side form delivery is enabled, the delivery service described above is also involved.

Where a statutory request or obligation applies, relevant records may be provided to authorized public bodies and judicial authorities only to the extent necessary to fulfil it, under Articles 5(2)(ç) and 8.

Puentech uses Microsoft 365 (Exchange Online) for corporate email. The “Current Geography” shown in the Microsoft 365 admin center identifies Europe as the region where mailbox data is stored at rest. This identifies the storage region; it does not mean that all service processing takes place exclusively in Europe.

Microsoft: explanation of data location information ↗

Overseas transfers

Email services and external platforms may process information outside Türkiye depending on their infrastructure. Overseas transfers require the processing grounds and transfer conditions in Article 9. Reading this notice or selecting an external content button does not itself provide a blanket legal ground for all regular overseas transfers. You can request information about recipients of your data and the applicable transfer arrangements.

External content, cookies and optional measurement

LinkedIn posts in Insights do not load automatically on opening the page. Selecting “Load LinkedIn post” connects your browser to LinkedIn, which receives your IP address and browser information. The platform may use cookies and process data abroad. If you are signed into LinkedIn, it may associate the connection with your account.

“Remove LinkedIn post” closes the embedded content and stops new loading for it; it does not erase information already received by LinkedIn or the platform’s cookies. The loading choice is held only in page memory, without a persistent preference record. You can also view the post through the external LinkedIn link.

Selecting an external link such as Help Desk or LinkedIn takes you to that service. Its own processing activities and policies also apply.

Optional analytics and advertising measurement run only after you accept measurement preferences. Configured Google Analytics may receive visit and inquiry events; Google Ads may receive successful inquiry identifiers and advertising click information; OpenAI server measurement may receive an inquiry event identifier and an advertising click identifier, if present. Names, emails, phone numbers and form messages are excluded from measurement events. Campaign details are added to inquiry messages only with accepted measurement preferences. You can change your choice in cookie preferences.

Details about cookies and browser storage

Your rights under Turkish data protection law

Under Article 11, you can ask Puentech to:

• Confirm whether information about you is processed and provide details if it is.
• Explain the purpose of processing and whether information is used for that purpose.
• Identify recipients in Türkiye and abroad.
• Correct incomplete or inaccurate information.
• Erase or destroy information when the conditions in Article 7 are met.
• Notify recipients of a correction, erasure or destruction.
• Consider your objection to an adverse outcome produced solely by automated analysis.
• Compensate damage arising from unlawful processing.

Making a request and receiving a response

Send a signed written request to Asia Residence Esentepe Mah. Milangaz Cad. No:73 Blok:B Kat:13 Daire:49 Kartal/İSTANBUL. You may also email info@puentech.com.tr from an address you previously provided to the company and which is registered in its systems. Requests using secure electronic signature or mobile signature methods specified by the applicable rules are also considered.

Include your name, signature for a written request, Turkish identity number if you are a Turkish citizen, or nationality and passport/identity number if you are not; your address for service, any email/phone/fax for notification, and the subject of your request. Attach relevant supporting documents where necessary. A full identity document copy is not a standard requirement; only necessary information is requested if additional identity verification is needed.

Identity, contact and request records necessary to assess a request are processed to fulfil the legal obligation to answer data subject requests under Article 5(2)(ç).

Requests are concluded as soon as their nature allows and within 30 days. The outcome or a reasoned refusal is communicated in writing or electronically. Requests are normally free; only the Board’s tariff may apply to operations with an additional cost. A charge is refunded if the request resulted from the company’s error.